This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/I9s0CuAsSv9jjGBuidBaFKRxG3E.roa File: I9s0CuAsSv9jjGBuidBaFKRxG3E.roa (raw, json) Hash identifier: +S81j8HPK5cUpwT0sL9F/IE0uD5isO0a17oFhAA521M= Subject key identifier: 23:DB:34:0A:E0:2C:4A:FF:63:8C:60:6E:89:D0:5A:14:A4:71:1B:71 Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140A0CB13CCA342998531F9C530A16 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/I9s0CuAsSv9jjGBuidBaFKRxG3E.roa Signing time: Fri 02 Jan 2026 14:19:38 +0000 ROA not before: Fri 02 Jan 2026 14:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 212.11.16.0/23 maxlen: 24 212.11.20.0/22 maxlen: 24 212.11.24.0/23 maxlen: 24 212.11.32.0/21 maxlen: 24 212.11.42.0/23 maxlen: 24 212.11.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0a:0c:b1:3c:ca:34:29:98:53:1f:9c:53:0a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23db340ae02c4aff638c606e89d05a14a4711b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:eb:54:56:19:db:bc:37:a9:90:26:53:3e: 1f:b1:be:d9:b4:be:b0:da:52:ad:51:09:53:50:16: 22:6b:e4:46:9a:78:46:50:51:18:f4:49:c2:c9:3f: f7:41:d5:db:75:66:e8:7c:e7:5f:03:09:cd:83:5b: 04:f5:d3:c3:22:b3:14:ab:ff:14:1b:b8:53:01:db: 3e:5f:d9:ab:35:8d:2c:0d:b5:32:7f:f9:1c:45:db: a5:0d:14:26:26:8a:15:2f:86:31:24:54:02:be:93: 56:17:47:24:8b:5c:6b:f0:9b:a5:2b:2d:0e:d0:a2: 37:ce:23:d4:61:37:54:0c:29:9d:0a:0c:1f:64:ea: 2b:1c:dc:51:15:79:55:81:94:11:3d:77:89:3a:6f: dd:58:72:8a:65:c8:01:24:52:76:c9:da:28:98:82: 4d:a6:0b:bc:ea:2e:2d:bb:9f:da:65:51:3f:72:4a: 14:f3:bd:41:a2:99:ad:5e:ae:ab:1e:52:d7:b2:3d: fe:63:70:0d:59:5a:6d:f3:d3:74:de:38:32:b0:3e: 9f:5b:80:67:95:f4:72:e4:f3:46:b1:39:c0:52:b2: e8:e4:47:bb:e0:25:53:18:3e:b9:70:b8:c6:bf:38: 5a:10:26:54:21:e6:92:b9:c0:8c:86:81:99:dc:9d: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:34:0A:E0:2C:4A:FF:63:8C:60:6E:89:D0:5A:14:A4:71:1B:71 X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/I9s0CuAsSv9jjGBuidBaFKRxG3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.11.16.0/23 212.11.20.0-212.11.25.255 212.11.32.0/21 212.11.42.0/23 212.11.60.0/23 Signature Algorithm: sha256WithRSAEncryption 95:51:06:a4:9b:57:3e:c6:86:9c:b7:11:54:2f:14:b0:11:04: dd:d6:b5:58:43:b4:c1:ab:bb:b4:40:06:17:79:fa:20:53:d1: 1f:07:3e:ca:4b:93:6e:99:ba:8b:a3:66:eb:05:2f:e8:69:f2: 8a:c3:78:31:2b:b7:74:65:d8:4e:ef:b8:7b:32:d8:01:6e:49: 2b:54:69:5e:32:b5:c3:32:a9:78:d6:39:e9:1a:81:d4:78:d8: 22:19:46:8a:1d:4d:13:46:41:2b:c0:f9:c2:d5:f2:04:60:c9: d3:28:0b:6c:cf:d1:0a:05:b6:c9:79:eb:d7:f1:3f:58:1e:3f: 36:c2:7c:7e:04:56:ee:9a:57:49:69:f0:bb:55:a5:71:66:31: f7:4d:6c:e8:2c:99:2c:05:7d:40:a7:ac:8e:6f:aa:52:84:9b: 0d:b0:06:b0:e4:b0:c4:28:18:ad:34:f8:58:bc:7d:07:c6:7b: 7d:7b:22:f5:f6:e7:bb:9b:46:27:0b:03:81:ed:2a:28:95:5a: 13:34:0b:bf:f0:8e:0c:23:62:09:4d:7f:e9:d4:62:fd:ba:ab: 6d:d8:16:3c:5a:9c:60:fc:9b:86:d7:38:a1:67:c2:bb:45:f0: ab:33:a6:19:29:a1:32:3b:a4:8d:e9:2c:3d:d1:d6:80:50:92: 5d:f7:7e:e5 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/FAoMsTzKNCmYUx+cUwoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2RiMzQwYWUwMmM0YWZmNjM4YzYwNmU4OWQwNWExNGE0NzExYjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxbrVFYZ27w3qZAmUz4fsb7ZtL6w 2lKtUQlTUBYia+RGmnhGUFEY9EnCyT/3QdXbdWbofOdfAwnNg1sE9dPDIrMUq/8U G7hTAds+X9mrNY0sDbUyf/kcRdulDRQmJooVL4YxJFQCvpNWF0cki1xr8JulKy0O 0KI3ziPUYTdUDCmdCgwfZOorHNxRFXlVgZQRPXeJOm/dWHKKZcgBJFJ2ydoomIJN pgu86i4tu5/aZVE/ckoU871BopmtXq6rHlLXsj3+Y3ANWVpt89N03jgysD6fW4Bn lfRy5PNGsTnAUrLo5Ee74CVTGD65cLjGvzhaECZUIeaSucCMhoGZ3J2XTwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCPbNArgLEr/Y4xgbonQWhSkcRtxMB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvSTlzMEN1QXNTdjlqakdCdWlkQmFGS1J4RzNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQB1AsQMAwD BALUCxQDBAHUCxgDBAPUCyADBAHUCyoDBAHUCzwwDQYJKoZIhvcNAQELBQADggEB AJVRBqSbVz7Ghpy3EVQvFLARBN3WtVhDtMGru7RABhd5+iBT0R8HPspLk26Zuouj ZusFL+hp8orDeDErt3Rl2E7vuHsy2AFuSStUaV4ytcMyqXjWOekagdR42CIZRood TRNGQSvA+cLV8gRgydMoC2zP0QoFtsl569fxP1gePzbCfH4EVu6aV0lp8LtVpXFm MfdNbOgsmSwFfUCnrI5vqlKEmw2wBrDksMQoGK00+Fi8fQfGe317IvX257ubRicL A4HtKiiVWhM0C7/wjgwjYglNf+nUYv26q23YFjxanGD8m4bXOKFnwrtF8Kszphkp oTI7pI3pLD3R1oBQkl33fuU= -----END CERTIFICATE-----Generated at Sun Jan 18 04:27:10 2026 by rpki-client